Home
Topics
Application and Platform Security
Social media security risks and real-time communication security
Screencast: How to use WPScan to provide WordPress plug-in security

Screencast: How to use WPScan to provide WordPress plug-in security

Date: Jan 30, 2012

Businesses are increasingly turning to WordPress to share their content on the Web, but despite WordPress itself being generally secure, the plug-ins that provide useful features for end users and website providers can introduce security vulnerabilities.

In this month’s SearchSecurity.com screencast, expert penetration tester Mike McLaughlin of First Base Technologies demonstrates how to use WPScan, a tool that exposes security vulnerabilities in WordPress plug-ins. He provides a link to download WPScan, walks through WPScan’s features, and shows how simple it is to assess a site's WordPress plug-in security. From SQL injection vulnerabilities to brute-force attacks on passwords, WPScan can help secure WordPress plug-ins quickly and easily.

About the author:
Mike McLaughlin is a penetration tester working for First Base Technologies, an information security consultancy in the UK. Mike's daily work consists of both internal and external network based penetration testing, Web application penetration testing, and social engineering.

More on Social media security risks and real-time communication security

Mobile malware and social malware: Nipping new threats in the bud
VIDEO - Learn mobile and social media malware prevention tactics as contributor Lisa Phifer analyzes the malware risks of social media and mobile devices.
Social media legal issues: Advice for IT security pros
VIDEO - Video: When a company or its employees use social media, the IT team should understand the legal terms and conditions of each social media site.
Faceoff: Has social networking changed data privacy and security?
VIDEO - In this exclusive conversation, security industry luminaries Hugh Thompson, founder of People Security, and Adam Shostack, author of "The New School of Information Security," discuss the state of social networking and data privacy, and why the social networking phenomenon may be an infosec ticking time bomb waiting to explode.
Gaging the security risk posed by the WordPress pingback vulnerability
Answer - Security expert Nick Lewis details the WordPress pingback vulnerability and advises whether it is time to update custom WordPress implementations.
Avoiding pitfalls in social media compliance, security
Answer - Expert Mike Chapple offers regulatory compliance advice regarding the management of enterprise social media accounts.
Trusteer warns of new man-in-the-browser Twitter attack
News - The attack seeks to compromise a Twitter webpage via a man-in-the-browser attack. Trusteer warns it could be a harbinger of broader future attacks.
( Apr 24, 2013 )
pharma hack
Definition - The pharma hack is an exploit that takes advantage of vulnerabilities in WordPress or Joomla documents, causing search engines, notably the one hosted by Google, to return ads for pharmaceutical products along with legitimate listings.
Safely using shortened URLs requires user education, technology
Answer - Expert Nick Lewis delves into the potential threat posed by shortened URLs and what enterprises can do to protect users from malicious short URLs.

Latest Headlines

Featured

E-Books

E-Zines

E-Handbooks

Topics

Hot Topics

Advice & Tutorials

Technology Dictionary

Tips

Answers

Ask a Question

Research Library

Product Demos

Resource Centers

Blogs

Screencast: How to use WPScan to provide WordPress plug-in security

Screencast: How to use WPScan to provide WordPress plug-in security

More on Social media security risks and real-time communication security

More from Related TechTarget Sites